CVE-2018-14513

PoC —

CVSS 3.0

6.1 medium

EPSS

1%p64

Published

Jul 23, 2018 (Jul 23, 2018)

Modified

Jun 17, 2026

Description

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[content] parameter to the index.php?m=feedback&f=index&v=contact URI.

Vendors: wuzhi cms project
Products: wuzhi cms
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.